CI/CD Lab 07: Artifact Signing and SLSA Provenance in GitLab CI

The security gate passed. The image is in the registry. But can you prove it?